IRAP Below are some general FAQ’s on IRAP. It is meant to provide some high level knowledge around the IRAP program. Why was IRAP created? What is it trying to address? IRAP which stands for Information Security Registered Assessors Program (IRAP) is an Australian Signals Directorate (ASD) initiative to provide high quality security assessments to government and industry. IRAP provides assurance to systems to meet cyber security standards set in ACSC Information security manual (ISM). The primary purpose of the IRAP assessment which is done by an independent assessor ensures that the assessed security controls are implemented and operating effectively where by support organisations to improve their cyber security. Who does it apply to? IRAP generally applies to all government and the industry Do IRAP assessors certify a system? This is common misunderstanding but IRAP assessors do not accredit, certify, endorse or register systems on behalf of ASD . Certification is provided by Aut